Description
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | Asset Suite | 9.6.0 – ≤ 9.9.0 | — |
Advisories 1
- ICSA-26-279-03 Hitachi Energy Asset Suite CISA ICS & IT advisories · Oct 6, 2026